QuiNVarium VPN Privacy Policy

QuiNVarium VPN · Version 1.0 · Effective 26 September 2026

1. Who we are

QuiNVarium LLC, a company organised in New Mexico, United States (“QuiNVarium”, “we”), publishes the QuiNVarium VPN app (the “app”) and operates the VPN service it connects to: the service API at api.vpn.quinvarium.app and the VPN servers listed in the app. Contact: support@quinvarium.app. Mailing address: 1209 Mountain Road Pl NE, Ste N, Albuquerque, NM 87110, United States.

This policy covers the app and the VPN service. The quinvarium.app website, QuiNVarium Wallet and our other products have their own policies. App stores, your device's operating system, the websites and apps you use through the VPN, and the providers named below have their own rules.

2. We don’t collect your data

The app has no accounts and collects no personal data. We never ask for your name, email address or phone number, and the app contains no advertising, analytics or tracking software. We do not sell your data and do not use or disclose it to third parties for any purpose.

While you use the VPN we do not record:

• the websites, apps and services you use, or the content of your traffic;
• the names your device looks up (DNS queries);
• your device’s IP address — neither with your activity nor on its own;
• your location, contacts, photos or other data on your device.

3. What the service handles while it works

To connect you and apply your plan, the service needs a few things for a short time. None of them tells us who you are.

• A random app key. On first use the service gives the app a random key, kept in your device’s secure storage. The service stores only a one-way hash of it and uses it to apply your plan (Free limits, Premium). It is not linked to your name, email, phone number, store account or device identifiers.
• Connection keys. For each connection your device creates a new key pair. The private key never leaves the device; the service receives only the public key.
• An open connection. While you are connected, the service holds the connection’s public key, its internal tunnel address, its start and end time and the data it carried, to keep it running and to count the Free limit. This record is deleted an hour after the connection ends.
• Today’s Free usage. The connection time and data used under the Free plan in the current day (UTC), so the app can show what is left. Deleted when the day ends.
• Your IP address while connected. The VPN server needs your device’s current public IP address to send your traffic back. It holds it in memory only while you are connected and never writes it to logs. Our service API keeps no request logs.
• DNS. While you are connected, the names your device looks up are resolved through the VPN server using Cloudflare’s public DNS 1.1.1.1. Cloudflare sees our server’s address, not yours. We do not record these queries.
• Speed test. It runs only when you tap it. The app first gets a pass valid for two minutes, then measures download, upload and latency to the chosen VPN server. A full test can use up to 1 GB of data. Results stay on your device. Our speed-test servers do not record your IP address.
• What websites see. Websites and services see the VPN server’s IP address. Depending on their address databases, they may place it in a different country than the one you chose.

4. Premium

Premium is sold through Apple’s App Store (and, where available, Google Play). The store takes payment under its own terms; we never see your card or payment details. To turn on Premium, the app passes the store’s signed purchase information to our service, which checks it with the store. The service keeps the store’s transaction identifiers, the product, the purchase, renewal and expiry dates and the subscription status, linked to the app’s random key, so Premium works and can be restored. One subscription serves up to 5 of your devices that restore it with the same store account. This link is deleted 30 days after the paid period ends, or at once when you delete your data (section 6). You manage and cancel the subscription in your store account.

5. Support

Support is by email. Writing to support from the app opens your own mail app with our address, support@quinvarium.app; the app itself sends us nothing. We use your email only to answer you and delete the correspondence 12 months after the last message, or earlier if you ask. Please never send passwords or payment details.

6. Deleting your data

More → Delete my data deletes everything the service keeps for your app: its random key, today’s Free usage, connection records and the link to your purchase. The app then removes its key, chosen country and speed-test history from your device. Deleting the app also removes its data from your device. Neither cancels a store subscription.

7. Who handles data

• Hosting providers in the countries of our VPN servers and service (currently Russia, Germany, the USA, Austria, Brazil, Kazakhstan and Uzbekistan) rent us the servers the service runs on.
• Apple and Google distribute the app and take payment for in-app purchases under their own terms.
• Cloudflare resolves DNS queries for our servers (section 3).

None of them receives more from us than this policy describes, and each protects that data at least as well as this policy does. We disclose data only where the law requires it, and we can only disclose what we have — as described above.

8. How long data is kept

• An open connection’s record — until an hour after the connection ends.
• Today’s Free usage — until the end of the UTC day.
• The app’s random key — while you use the app, until you delete your data.
• The link to your purchase — until 30 days after the paid period ends, or until you delete your data.
• Support email — 12 months after the last message, or less if you ask.
• Request logs of the service — none are kept.

9. Your choices and rights

You can disconnect at any time, delete your data in the app and delete the app. Depending on where you live, you may have the right to access, correct, delete or receive a copy of your data, to object to or restrict its processing, and to complain to a data protection authority. Because we hold no data that identifies you, Delete my data in the app answers most requests; you can also write to support@quinvarium.app. Never send passwords.

10. Age, security and changes

The app is intended for adults (18+). We do not knowingly collect data from children.

Connections use AmneziaWG, an obfuscated version of the WireGuard protocol, with keys created on your device. The app talks to the service over encrypted connections. No system is perfectly secure; tell us if you suspect a problem.

When this policy changes, we update the version and date above and show the change in the app where required.